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This is a Reply Briefin response to the Examiner's Answer mailed May 30, 2008, It is 
respectfully submitted that the Reply Brief is timely filed within two months of the mail date of 
the Examiner's Answer. 
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The remarks below arc mostly in response to the Examiner's arguments on pages 15-20 
of the Examiner's Answer. 

1- Remarks, pertaining to E^miner J s arguments concerning the rejection of claims 1- 
3. 4 and ll-13jmder_3S S1.02fcYm being anticipated by Arte 

On pages 15-16 of the Examiner's Answer, the Examiner is asserting that Kocher (page 
1 9, paragraphs 1 and 2) teaches the following features of claim 1 : 

in response to each subsequent communication from each mobile device 
to (he application program via the connection between the mobile device and the 
application program while the connection is established, transmitting from the 
gateway module to the application program the second session identifier that is 
associated with the first session identifier of the mobile device of the subsequent 
communication. 

As indicated above, claim 1 recites that "while the connection is established" [emphasis 
added], in response to each subsequent communication transmitting the second session identifier 
(wherein the second identifier is originally from the application program as recited in the claim) 
back to the application program from the gateway module* 

Kocher discloses in the second paragraph of page 19 that the when the client and server 
decide to resume a previous session, the client sends a ClientHello to the server using the session 
TD of the session to be resumed* The server checks its session cache for a match of the session 
identifier, if the server finds a match and the server is willing to "re-establish the connection" it 

2 
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will send a ScrvcrHcllo with the same session ID. The Examiner is interpreting the CHcntHello 
message and session ID sent from the client to the server to resume a previous session as the 
claimed gateway module sending a second session ID back to the application program. 

As sped fically stated in Kocher, the Clicntl-lcllo message of Kocbcr is for **re- 
establishing" the connection. Thus, the ClicntHcllo message is not transmitted while the 
connection is established, and Kocher fails to teach while the connection is established, 
transmitting the second session identifier for each subsequent communication. 

Furthermore, the ClicntHcllo message of Kocher is only transmitted for re-establishing a 
connection and not for subsequent communications on the re-established connection. That is, 
Kocher fails to teach that after the connection is re-established, the CHcntHello message and the 
session ID are transmitted from the client to the server for each subsequent communication on 
the connection. Thus, Kophcr fails to teach transmitting the second session identifier for each 
subsequent communication* 

Independent claims 4 and 1 1 recite features similar to the features of claim 1 described 
above, which are not taught by Kocher for the reasons stated above. 

2» Remarks pertaining to the Examiner's arguments concerning the refection of claims 
<^9_undcr_ 35 U.S.C-_£1 03fa> as being unpatentable over_Azi2_inview_Qf_Pavis_in_furthcr 
view of Sparks 

Claim 6 includes features of receiving checkout requests from the wireless 
communication devices at the gateway module and transform g the checkout requests to a wallet 
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module that manages user authentication. Claim 6 also recites a user logged into a wallet 
module, transmitting payment options from the wallet module to the wireless devices, and 
transmitting a log-in prompt from the wallet module to the wireless devices. Claim S includes 
the following features: in response to a payment request from a wireless communications device, 
transmitting the payment request from the gateway module to the merchant application, 
disassociating the wireless session identifier from the corresponding merchant session identifier, 
and generating a new wireless session identifier for the wireless communications device when 
another initial request is received from the wireless communications device. Azifc and Sparks 
fail to teach or suggest these features. 

The Examiner on page 17 of the Examiner's Answer asserts that the prior art combination 
enables the steps for the wallet module in claim 6. It appears the Examiner is alleging that 
because Sparks may perform the claimed steps (i*e M enables the claimed wallet module), these 
features are taught by Sparks. However, merely because the prior art can allegedly perform the 
claimed steps pertaining to the wallet module, docs not mean these features ore taught or 
suggested by the prior art The Examiner must provide prior art that teaches each of the claimed 
features. In this case, both Aziz and Sparks Ml to teach or suggest the steps of claim 6 
pertaining to the wallet module. 

Regarding disassociating the wireless session identifier from the corresponding merchant 
session identifier recited in claim 8, the Examiner asserts on page 1 8 of the Examiner's Answer 
that no means of disassociation is claimed, and the session identifiers of the client and server in 

4 
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A%tz/Kochcr arc not re-associated unless a session has resumed. The Examiner then states, **for 
all intents and purposes, they are disassociated " 

The Examiner appears to he asserting that when a connection between the client and 
server is disconnected, the session IDs of the client and server are disassociated. This is not true. 
Kocher simply maintains a cache of the session IDs for each session* However, JCochcr fails to 
teach any disassociation of client and server session IDs, Instead, Kocher only discloses that to 
resume a session, a session TD from the client is matched with a session TD in the session cache. 
However, Kocher docs not disclose any disassociation of client and server session IDs. There is 
no need for disassociation of the client and server session IDs in Kocher because the client and 
server session IDs, because the IDs are the same for the same session. Thus, there is only a 
matching process to resume a connection but no disassociation step performed in Kocher to 
cancel a connection, 

3. Remarks pertaining to Examiner's arguments concerning the rejection of claims 1- 
13 under_35JQA_C-itl03(aXns 

On page 1 8 of the Examiner's Answer, the Examiner asserts that generating the second 
session identifiers from the application is not claimed. Instead, claim 1 recites, "second session 
identifiers from the application program" rather than generating the second session identifiers 
from the application, and thus the T1D field 2005 identifying a terminal is the second session 
identifiers from the application. 

5 
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Firstly, the TK> field 2005 is a terminal ID* See column 62, lines 61-63. The TTD field 
identifies a physical terminal* The T1D 2005 T however, docs not identify any type of session or 
connection. Thus, Nguyen in view of Davis fails to teach or suggest the claimed first and second 
session identifiers. 

Also, Nguyen discloses that when the virtual point of sale terminal (VPOS) is used for a 
transaction, the VPOS uses the VPOS transaction request shown in figure 20D* See column 65, 
lines 49-58* The VPOS generates a VPOS transaction request including data necessary to 
process a transaction, such as a TID required by an authorizing bank (sec column 62, lines 61- 
63)* In particular, instead of the physical TID 2005, the VPOS generates a virtual terminal ID 
201 2 for inclusion in the transaction request. See column 65, lines 51-52* A database 2008 at 
the VPOS is used to determine the virtual terminal ID. Sec column 65, lines 43-46 and column 
66, lines 32-53, Thus, from the disclosure in columns 65 and 66 of Nguyen, when a transaction 
is to be completed for a customer, the VPOS generates a transaction request including the data 
structure 2010 (having the virtual terminal ID). The bank 2004 uses the virtual terminal ID in 
the transaction request to authorise the transaction. Nguyen does not disclose the bank 2004 
sends the physical TID 2005 or the virtual terminal ID to the VPOS* Thus, Nguyen in view of 
Davis fails to teach or suggest second session identifiers from the application program. 

Claim 1 recites, "associating the first session identifiers with corresponding second 
session identifiers from the application program at the gateway module." The Examiner 
indicates the claimed second session identifiers from the application is TID 2005, which is 
shown in figure 20B of Nguyen, and the claimed first session identifier is the XACT REQ 20 1 0 

6 

PAGE 7110 ' RCVD AT 7/2912008 4:14:09 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-5/2 * DNIS:2738300 * CSID:7038655150 ' DURATION (mm^s):01-54 



JUL-29-2008(TUE) 15:28 MRNNHVA & KRNG ( FAX ) 7 038655 1 50 P. 008/010 



PATENT Atty Docket No.: 10007291-1 

App. Sen No.: 09/852,360 

shown in figure 20C of Nguyen which allegedly uniquely represents a transaction request from 
one of the clients 200* Also, the Examiner indicates the claimed application is the ACA Bank 
2004 shown in figure 20C, and the claimed gateway module is the VPOS 2007 shown in figure 
20C 

Nguyen docs not disclose the TID 2005 is used with a VPOS transaction request 201 0. 
Instead, the TID 2005 is used for a physical terminal (sec column 6S, lines 28-37) rather than for 
a virtual transaction performed using the VPOS and the virtual terminal ID (see column 65, lines 
39-47), Thus, Nguyen does not disclose the physical TID 2005 is associated with the VPOS 
transaction request as alleged by the Examiner. 

Furthermore, the Examiner relies on column 64, lines 36-38 of Nguyen to teach 
associating the second session identifiers from the application program with the first session 
identifiers. This passage describes the VPOS engine assigning a virtual terminal ID from the 
VPOS database 2008. See column 65, lines 43-46 and column 66, lines 32-53. This passage, 
however, iails to teach or suggest the VPOS receiving a virtual terminal ID from the bank 2004, 
and also fails to teach or suggest the VPOS associating a terminal ID received from the bank 
with a transaction request 20 1 0* Thus, Nguyen in view of Davis fails to teach associating the 
first session identifiers with corresponding second session identifiers from the application 
program at the gateway module. 

Claim 1 also recites, '"wherein respective connections are established between the mobile 
communications devices and the application program " On page 1 9 of the Examiner's Answer, 
the Examiner appears to allege that the claimed connections are disclosed in Nguyen, because a 
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customer transaction is performed between a customer and a bank. However, as described in the 
Appeal BrieF, the clients 2000 communicate with the VPOS terminal to perform a transaction, 
such as a payment The VPOS communicates with the bank 2004 on a separate connection 2003 
shown in figure 20C. Thus, Nguyen in view of Davis fails to teach or suggest the claimed 
connections. 

. Davis was combined with Nguyen to teach a mobile device. Davis fails to remedy the 
deficient teachings of Nguyen, Thus, Nguyen in view of Davis fails to teach or suggest all the 
features of claim !♦ 
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Conclusion 

For at least the reasons given above, the rejection of claims 1-13 described above should be 
reversed and these claims allowed. 

Please grant any required extensions of time and charge any fees due in connection with 
this Reply Brief to deposit account no. 08-2025. 

Respectfully submitted, 



Dated: July 29, 2008 




Registration No,: 45,301 



MANNAVA & KANG, P.C 
1 1240 Waples Mill Road 
Suite 300 

Fairfax, VA 22030 
(703) 652-3822 
(703)865-5150 (fecsimile) 
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